Microsoft Sentinel Data Connector

Hi @mikekaro , welcome to the forum!

I am unfamiliar with Microsoft Sentinel, but perhaps I can help on the Box side.

I’m going to need a bit more context on this, can you eleaborate?

Best regards

Here is what I am working off of. I’m sticking to what’s related in your docs as far as JWT auth.

Box (using Azure Functions) connector for Microsoft Sentinel | Microsoft Learn

Hi @mikekaro

Let’s start with the basics. Do you have a Box application configured to authenticate via JWT and the corresponding JWT config.json file, as stated here?

• Box API Credentials: Box config JSON file is required for Box REST API JWT authentication. See the documentation to learn more about JWT authentication.

Here is an example of a JWT configured app (you’ll need to access your developer console at https://app.box.com/developers/console:

Best regards

Yes, I do have the json file with the keypair included in the file.

Very good, it seems from the Box side you’re all set.

What do you mean by this?

I’m trying to get this same Sentinel Logging enabled and I also have the API and JWT Authorized.
I’ve made changes and signed into and out of Box many times.  How do we troubleshoot this type of integration?
​@mikekaro Did you ever get your Sentinel and Box Data Connector to work?  Did you use the Azure Functions or the Box CCP?